# Qualcomm Qcc5100 Firmware


- [CVE-2022-40510](https://insights.sbomify.com/CVE-2022-40510/): Buffer copy without checking size of input in Audio. (critical 9.8)
- [CVE-2022-40514](https://insights.sbomify.com/CVE-2022-40514/): Buffer copy without checking size of input in WLAN Firmware (critical 9.8)
- [CVE-2022-22088](https://insights.sbomify.com/CVE-2022-22088/): Integer Overflow to Buffer Overflow in Bluetooth HOST (critical 9.8)
- [CVE-2022-25720](https://insights.sbomify.com/CVE-2022-25720/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (critical 9.8)
- [CVE-2022-25748](https://insights.sbomify.com/CVE-2022-25748/): Integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (critical 9.8)
- [CVE-2023-21651](https://insights.sbomify.com/CVE-2023-21651/): Incorrect Type Conversion or Cast in Core (critical 9.3)
- [CVE-2022-33257](https://insights.sbomify.com/CVE-2022-33257/): Time-of-check time-of-use race condition in Core (critical 9.3)
- [CVE-2022-25718](https://insights.sbomify.com/CVE-2022-25718/): Weak cryptography in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (critical 9.1)
- [CVE-2022-25655](https://insights.sbomify.com/CVE-2022-25655/): Buffer copy without checking the size of input in WLAN HAL. (high 8.4)
- [CVE-2022-25694](https://insights.sbomify.com/CVE-2022-25694/): Use of Out-of-range Pointer Offset in MODEM (high 8.4)
- [CVE-2022-40531](https://insights.sbomify.com/CVE-2022-40531/): Incorrect type conversion in WLAN (high 8.4)
- [CVE-2022-40539](https://insights.sbomify.com/CVE-2022-40539/): Improper Validation of Array Index in Automotive Android OS (high 8.4)

---
From sbomify Insights: https://insights.sbomify.com/products/qualcomm/qcc5100-firmware/
